GhostTree Attack Abused Recursive Windows Junctions to Hide Malware

GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths.

Source BleepingComputer AI Summary Updated 1h 22m ago

Story intelligence Beta

Freshness Fresh Updated 1h 22m ago

Confidence Limited Single-outlet story

Coverage Single outlet

Views 1 Community interest

Read time 1 min ~32 words

AI Summary

GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique could cause Microsoft Defender folder scans to never complete, leaving malware undetected. [...]

Read full article on Bleepingcomputer

AI summaries can be wrong sometimes—always verify important details using the source article.